RE: [IPCop-user] Routed/gated/zebra on IPCop 0.1.1?

[Chris L. <ly...@co...>]

 
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Yeah.  Outlook can be evil sometimes.  You just have to know how to
use it.

I don't expect you to install the full MetaFrame product on one of
your machines, but rather the ICA client, which is available from
http://www.citrix.com/download/ica_clients.asp.  After installation,
create a Custom ICA Connection.

Thanks for the update on the DNS caching problem.  But, I still have
the other problem besides the port forwarding issue.  My clients
cannot browse the Internet.  They can now resolve URL's, but they
cannot establish a session to the web server.  Do I need to use the
Proxy server, or do I need to do something else?

Thanks,

Chris

- -----Original Message-----
From: ipc...@li...
[mailto:ipc...@li...] On Behalf Of John
Edwards
Sent: Friday, May 31, 2002 10:10 AM
To: Chris Lynch
Cc: 'IPCop User List'
Subject: Re: [IPCop-user] Routed/gated/zebra on IPCop 0.1.1?


On Fri, May 31, 2002 at 09:49:36AM -0700, Chris Lynch wrote:
>  
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> I did not put an uppercase e in echo.  Outlook did this for me, and
> I  forgot to change it.

Outlook: "They do say that evil can sometimes wear a pretty face."

> Also, the . I put into the command, I just
> looked at the other script calls within rc.network and did the same
>  thing.

It's a common mistake, but putting a . in front changes the way it
called.

> When I logged into the firewall, I ran the zebra script command
> with  the entire path to the script, and now zebra is working. RIP
> started,  and now I see all of my RIP routes.
:)

> Thanks for your help.

No problem. Thanks for testing the Zebra stuff.

> Also, I has asked another question as to why my clients cannot
> reach  the Internet.  I have finally figured out that I need to use
> the 
> firewall as the DNS caching server for any and all outbound DNS 
> requests.  However, I cannot establish a session to any web server 
> outside the network.

To see if they have a route to the website, and the website can reply
run the ping command from any PC (eg "ping www.yahoo.com"), should
work 
on anything that's no a Mac.

Also be aware that the DNS caching server on IPCop 0.1.1 and early
does 
occasionally fail, and it's being replaced in v0.1.2. I usually
prefer 
to use the ISP's DNS servers, which is slower but safer.

> Also, I have a test MetaFrame XPe server that I would like to test.
> I have made the following additions to Port Forwarding:
> 
> Source Port:  2001   Destination IP:   192.168.150.20   Destination
> Port:  1494
> 
> I have also added the following External Service Access:
> 
> Proto:  TCP     Source:  ALL     Port: 1494     Enabled:  Yes
> 
> I have added the required ALTADDR statement to the MetaFrame
> server,  but I cannot make an ICA session.
> 
> If someone wanted to test it for me from another network, please
> email  me and I will tell you the external IP address.
> 
> I am including a diagram of how the network looks.  Is there
> anything  I am missing that I need to configure on the firewall?
> 
> Thanks,
> 
> Chris

I've not got any experience with MetaFrame, nor a suitable PC to run
it on, 
so I'll pass that joy onto someone else.

- -- 
John Edwards
sh...@co...

_______________________________________________________________

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas --
http://devcon.sprintpcs.com/adp/index.cfm

_______________________________________________
IPCop-user mailing list
IPC...@li...
https://lists.sourceforge.net/lists/listinfo/ipcop-user

-----BEGIN PGP SIGNATURE-----
Version: PGP 7.1
Comment: Public Key Signature for Chris Lynch

iQA/AwUBPPe5mkr5pFJx+BQ5EQJAawCgkvjDRY4nHIMEjt/Ugk6rcEYotNsAn15C
yAHbhgnd5+M/889oEgLSjTTp
=vPbW
-----END PGP SIGNATURE-----